⬆️ gha: Bump the github-actions group across 1 directory with 11 updates #73
Conversation
Bumps [cloudposse/github-action-terratest](https://github.com/cloudposse/github-action-terratest) from 2a947b90b7807677d97c539785bb4b5004e6739c to dee3c6c2a6f988c4405965ed69972925a5c3a0b2. - [Release notes](https://github.com/cloudposse/github-action-terratest/releases) - [Commits](cloudposse/github-action-terratest@2a947b9...dee3c6c) --- updated-dependencies: - dependency-name: cloudposse/github-action-terratest dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…with 10 updates Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.8.1` | `2.9.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.0.1` | `5.0.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.25.10` | `3.25.14` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.3` | `4.3.4` | | [reviewdog/action-trivy](https://github.com/reviewdog/action-trivy) | `1.9.0` | `1.11.0` | | [reviewdog/action-misspell](https://github.com/reviewdog/action-misspell) | `1.21.0` | `1.23.0` | | [reviewdog/action-alex](https://github.com/reviewdog/action-alex) | `1.11.0` | `1.13.0` | | [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint) | `0.22.0` | `0.24.0` | | [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.51.0` | `1.54.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.3.4` | Updates `step-security/harden-runner` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@17d0e2b...0d38121) Updates `actions/setup-go` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@cdcb360...0a12ed9) Updates `github/codeql-action` from 3.25.10 to 3.25.14 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@23acc5c...5cf07d8) Updates `actions/dependency-review-action` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@72eb03d...5a2ce3f) Updates `reviewdog/action-trivy` from 1.9.0 to 1.11.0 - [Release notes](https://github.com/reviewdog/action-trivy/releases) - [Commits](reviewdog/action-trivy@53df306...14e16b3) Updates `reviewdog/action-misspell` from 1.21.0 to 1.23.0 - [Release notes](https://github.com/reviewdog/action-misspell/releases) - [Commits](reviewdog/action-misspell@30433ca...ef8b22c) Updates `reviewdog/action-alex` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/reviewdog/action-alex/releases) - [Commits](reviewdog/action-alex@cb33600...f95df9e) Updates `reviewdog/action-markdownlint` from 0.22.0 to 0.24.0 - [Release notes](https://github.com/reviewdog/action-markdownlint/releases) - [Commits](reviewdog/action-markdownlint@03033f3...e9f3ab4) Updates `reviewdog/action-actionlint` from 1.51.0 to 1.54.0 - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@afad3b6...4f8f996) Updates `actions/upload-artifact` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@6546280...0b2256b) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: reviewdog/action-trivy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-misspell dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-alex dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-markdownlint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-actionlint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
WalkthroughThe recent updates to the GitHub Actions workflows involve upgrading several key actions across multiple YAML files. These upgrades enhance security, performance, and functionality, ensuring the workflows are up to date with the latest version improvements. The primary focus is on the Changes
Sequence Diagram(s)sequenceDiagram
participant User
participant CI/CD
participant Actions
participant CodeQL
User->>CI/CD: Trigger workflow
CI/CD->>Actions: Execute actions
Actions->>CodeQL: Analyze code
CodeQL-->>Actions: Return analysis results
Actions-->>CI/CD: Complete workflow
CI/CD-->>User: Notify completion
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: CodeRabbit UI
Review profile: ASSERTIVE
Files selected for processing (5)
- .github/workflows/codeql.yml (3 hunks)
- .github/workflows/dependency-review.yml (1 hunks)
- .github/workflows/lint.yml (8 hunks)
- .github/workflows/scorecard.yml (2 hunks)
- .github/workflows/test.yml (2 hunks)
Additional comments not posted (22)
.github/workflows/dependency-review.yml (2)
20-20: Approved: Version upgrade forharden-runner.The
harden-runneraction has been upgraded to version2.9.0. This change is consistent with the AI-generated summary.
27-27: Approved: Version upgrade fordependency-review-action.The
dependency-review-actionhas been upgraded to version4.3.4. This change is consistent with the AI-generated summary..github/workflows/test.yml (3)
19-19: Approved: Version upgrade forharden-runner.The
harden-runneraction has been upgraded to version2.9.0. This change is consistent with the AI-generated summary.
23-23: Approved: Version upgrade forsetup-go.The
setup-goaction has been upgraded to version5.0.2. This change is consistent with the AI-generated summary.
38-38: Approved: Version upgrade forgithub-action-terratest.The
github-action-terratestaction has been upgraded to a newer commit. This change is consistent with the AI-generated summary..github/workflows/codeql.yml (5)
44-44: Approved: Version upgrade forharden-runner.The
harden-runneraction has been upgraded to version2.9.0. This change is consistent with the AI-generated summary.
51-51: Approved: Version upgrade forsetup-go.The
setup-goaction has been upgraded to version5.0.2. This change is consistent with the AI-generated summary.
57-57: Approved: Version upgrade forcodeql-action/init.The
codeql-action/initaction has been upgraded to version3.25.14. This change is consistent with the AI-generated summary.
67-67: Approved: Version upgrade forcodeql-action/autobuild.The
codeql-action/autobuildaction has been upgraded to version3.25.14. This change is consistent with the AI-generated summary.
80-80: Approved: Version upgrade forcodeql-action/analyze.The
codeql-action/analyzeaction has been upgraded to version3.25.14. This change is consistent with the AI-generated summary..github/workflows/scorecard.yml (3)
36-36: LGTM!The
step-security/harden-runneraction has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
68-68: LGTM!The
actions/upload-artifactaction has been correctly updated tov4.3.4. This minor version update likely includes bug fixes or performance improvements.
76-76: LGTM!The
github/codeql-action/upload-sarifaction has been correctly updated tov3.25.14. This update should improve the functionality of the code scanning process..github/workflows/lint.yml (9)
20-20: LGTM!The
step-security/harden-runneraction in thetflintjob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
41-41: LGTM!The
step-security/harden-runneraction in thetrivyjob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
47-47: LGTM!The
reviewdog/action-trivyaction has been correctly updated tov1.11.0. This update should enhance the vulnerability scanning capabilities.
61-61: LGTM!The
step-security/harden-runneraction in thegolangci-lintjob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
81-81: LGTM!The
step-security/harden-runneraction in theprettierjob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
102-102: LGTM!The
step-security/harden-runneraction in themisspelljob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
108-108: LGTM!The
reviewdog/action-misspellaction has been correctly updated tov1.23.0. This update should enhance the spell-checking functionality.
123-123: LGTM!The
step-security/harden-runneraction in thealexjob has been correctly updated tov2.9.0. This update should enhance the security features of the runner.
129-129: LGTM!The
reviewdog/action-alexaction has been correctly updated tov1.13.0. This update should enhance the grammar checking functionality.
Summary by CodeRabbit
harden-runner,setup-go,upload-artifact, and various reviewdog actions to their latest versions.